Category: Administration / Server

04.04.2020

https://theintercept.com/2020/04/03/zooms-encryption-is-not-suited-for-secrets-and-has-surprising-links-to-china-researchers-discover/ hm…. let me think where one has seen this before: TELEGRAM! Zoom’s service is “not suited for secrets” “The researchers also found that Zoom protects video and audio content using a home-grown encryption scheme, that there is a vulnerability […]

Post-Quantum Cryptography
03.04.2020

Videos: ssh thanks for sharing even when the audio is pretty crappy. slides (hard to read on video) can be found here: https://degabriele.info/slides/SSH_CCS_16.pdf “dropbear” is ambedded ssh server Made in Australia (wiki) also available as Android App naming: a “dropbear” […]

06.03.2020

hostnamectl; # tested on Icon name: computer-desktop Chassis: desktop Operating System: Debian GNU/Linux 10 (buster) Kernel: Linux 4.19.0-8-amd64 Architecture: x86-64 su – root; # become root apt update apt install rfkill rfkill list all 0: phy0: Wireless LAN Soft blocked: […]

GNU Linux Distributions – about Fedora -> CentOS -> RedHat
19.02.2020

imho: CentOS is a rock solid server operating system. Why is CentOS perfect for servers? a server (usually) is build for a specific purpose and should have as little software installed as possible (more software = more reliability, speed and […]

15.01.2020

basically one column view of a specific directory without all the “-rw-r–r–. 1 owner group 734 Jan 15 20:16” clutter. ls -C1 /etc/lighttpd/conf.d/*.conf /etc/lighttpd/conf.d/access_log.conf /etc/lighttpd/conf.d/auth.conf /etc/lighttpd/conf.d/cgi.conf /etc/lighttpd/conf.d/cml.conf /etc/lighttpd/conf.d/compress.conf /etc/lighttpd/conf.d/debug.conf /etc/lighttpd/conf.d/dirlisting.conf /etc/lighttpd/conf.d/evhost.conf /etc/lighttpd/conf.d/expire.conf /etc/lighttpd/conf.d/magnet.conf /etc/lighttpd/conf.d/mime.conf /etc/lighttpd/conf.d/proxy.conf /etc/lighttpd/conf.d/rrdtool.conf /etc/lighttpd/conf.d/scgi.conf /etc/lighttpd/conf.d/secdownload.conf /etc/lighttpd/conf.d/simple_vhost.conf /etc/lighttpd/conf.d/ssi.conf […]

Russian IT Security Updates 2020-01
13.01.2020

now WITH SPICY COMMENTS X-D SecurityLab, [22.12.19 12:40] A Twitter user using the alias 08Tc3wBB created tfp0-an exploit that allows you to jailbreak the latest iPhone models with IOS 13.3. The functionality of the exploit has already been confirmed by […]

the second nftables howto – it is fast and …… complicated
12.01.2020

firewall & pinguin: iptables where do thou go? it is said that when using “ip-sets” iptables and nftables achieve almost same performance (amounts of ips possible to block, without server becoming slow/unresponsive) Redhat and nftables on DDoS “so the only […]

gnu linux bash – ssh login as different user
12.01.2020

situation: one is userA but wants to ssh login to server with ipv4: 123.123.123.123 via userB (dedicated user for that server/task). so what one does is: make sure one can login as userB than as userA: userA: ssh -v -i […]

CNBC documentary about Open Source
01.01.2020

what do you think about the CNBC documentary? 2012: Aalto Talk with Linus Torvalds: 1,5 Million Views! contains the famous “Fuck You NVIDIA” https://www.youtube.com/watch?v=MShbP3OpASA Linus Torvalds writes software since his early childhood ages and just loves programming. Without this love […]

Russian IT Security Updates Nov2
21.11.2019

new Russian IT Security updates: thanks to https://www.securitylab.ru/ and https://translate.yandex.com/   SecurityLab, [06.11.19 16:12] The Libarchive compression library, which is included by default in Debian, Ubuntu, Gentoo, Arch Linux, FreeBSD, and NetBSD distributions, contains a vulnerability that allows an attacker […]

another reason NOT to use wireless keyboards
27.10.2019

“In the popular series of wireless keyboards Fujitsu LX390 found two dangerous vulnerabilities. According to researchers from the company SySS, exploitation of vulnerabilities allows nearby attackers to “spy” passwords entered on the keyboard, or even to seize control of the […]